You are a cybersecurity consultant for a major airport that offers free Wi-Fi to travelers. The management is concerned about the possibility of "Evil Twin" attacks, where a malicious actor sets up…

Question

Options

• ARegularly change the SSID of the airport's Wi-Fi network
• BUse MAC address filtering on the airport's Wi-Fi network
• CImplement WPA3 encryption for the airport's Wi-Fi network
• DDisplay a captive portal page that warns users about the possibility of Evil Twin attacks

• A
  4% (1)
• B
  8% (2)
• C
  64% (16)
• D
  24% (6)

Explanation

WPA3 Encryption as the Best Defense Against Evil Twin Attacks

Implementing WPA3 encryption (Option C) is the most effective solution because it introduces Simultaneous Authentication of Equals (SAE), which protects against Evil Twin attacks by ensuring that even if a rogue access point mimics the SSID, it cannot replicate the cryptographic handshake - meaning clients and the legitimate access point mutually authenticate without requiring travelers to install anything extra. Option A (changing the SSID) is ineffective because attackers can simply mirror the new SSID just as easily, providing no real protection. Option B (MAC address filtering) is impractical in a public airport environment with thousands of anonymous users and is easily bypassed by MAC spoofing. Option D (captive portal warnings) relies entirely on user awareness and behavior, which is unreliable - most travelers will ignore warnings or not understand them, making it the weakest possible technical control.

Memory Tip: Think of WPA3 as a "secret handshake" - even if a fake access point wears the same name tag (SSID), it doesn't know the handshake, so your device won't trust it. When the question mentions "no software install + no user friction + stop impersonation," always lean toward the strongest authentication/encryption protocol available.

No community discussion yet for this question.